$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: lrSafTsNBSYmC+wzKGutEid/qLmmlfIioCV6D1YhMbc= Subject key identifier: 0C:18:BF:29:CF:82:FB:EF:0C:2B:1F:57:6A:DE:19:A5:BE:30:01:92 Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 0136 Signing time: Sat 31 May 2025 04:08:10 +0000 Manifest this update: Sat 31 May 2025 04:08:10 +0000 Manifest next update: Sat 07 Jun 2025 04:08:10 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: cGKpOb9DSITOna/6JctctqPZzi18eU6sVxtbmGe0C6A=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: May 31 04:08:10 2025 GMT Not After : Jun 7 04:08:10 2025 GMT Subject: CN=683a80aa-7aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:83:00:29:92:9c:8c:43:d8:73:c3:a9:5d: 58:ba:67:21:7f:62:de:8a:a5:dc:b7:36:1e:89:9d: 4a:72:62:78:2c:5d:6e:25:7c:ea:cf:e3:58:43:9c: a9:af:f9:d2:29:b5:cb:8f:ed:28:0b:d5:42:5d:c0: 99:1a:bb:3b:a1:d9:c1:8b:b4:20:d3:0e:cf:20:dd: ec:58:98:0c:61:2e:53:27:a8:a5:5a:a0:84:74:c0: c6:98:ce:f2:4d:c8:73:c9:92:bd:6f:12:78:bd:a8: 55:30:18:05:a1:29:8f:2d:0a:2e:5c:4f:16:92:cd: fc:44:fc:1a:e1:7b:94:e8:32:82:b3:a0:82:5c:66: 18:dc:57:ea:e7:ba:4b:3c:67:85:e7:06:e6:6d:ba: 4a:96:61:0b:60:1e:8e:54:1e:95:4c:06:89:08:ec: f7:5b:75:29:e3:39:c6:6d:9c:25:76:03:67:12:1b: 14:3e:bb:db:1d:c5:8f:14:0c:3f:4b:ba:bb:bc:94: 7f:a2:5e:e7:51:47:2d:61:96:22:17:8c:ba:cf:26: 14:28:ee:70:a5:5c:5c:35:19:e3:22:21:be:9b:4e: 5d:87:f5:ec:31:cb:ea:fe:27:b4:00:4f:d6:4d:1f: b8:db:d1:6a:c4:b6:6c:41:46:f5:f6:21:dd:c0:ac: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:18:BF:29:CF:82:FB:EF:0C:2B:1F:57:6A:DE:19:A5:BE:30:01:92 X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:a6:6c:7c:6e:4f:e8:fb:57:4b:e4:02:c6:60:d5:88:d5: 68:bb:76:73:c1:e5:8b:92:d1:1d:bd:c0:9d:06:ae:bd:5f:92: 79:5e:ef:f0:1d:5d:89:7e:de:e2:a5:c9:f5:a4:5c:7e:d1:08: ad:ed:c7:dc:6a:9f:8a:66:1a:97:90:87:e6:04:1f:53:5a:09: 8c:8b:3c:be:ad:32:03:3c:17:d7:4c:f6:d6:52:08:cc:d0:a5: 00:ed:c6:b9:ba:6b:e4:5a:b4:dc:7e:34:83:73:c3:3a:e2:31: d1:f7:74:07:f7:0a:4d:2b:12:22:13:7c:78:27:06:b4:c4:9e: 2d:df:8b:ca:79:88:ca:20:fd:33:18:d0:ed:ea:8c:18:fb:0d: 18:6d:95:94:f6:cd:88:81:e2:5c:1b:0f:0c:54:6d:5e:0c:da: 9c:6b:a2:ac:9c:b4:42:db:5c:cb:e8:47:54:1e:2b:f2:24:5b: 97:03:bb:3b:d1:b8:3b:36:62:d5:bc:0c:93:36:82:05:e1:b4: 35:9b:dc:fb:ed:e7:e9:64:9f:cc:7b:c0:52:0b:9f:24:1e:4f: 45:ba:b5:cf:f0:00:75:51:8f:fc:d2:d3:32:ee:09:06:23:57: 21:ab:1e:2b:dc:98:ec:9a:ae:b2:23:4a:53:d1:ea:05:c0:5f: d8:79:d4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUwNTMxMDQwODEwWhcNMjUwNjA3MDQwODEwWjAYMRYwFAYD VQQDEw02ODNhODBhYS03YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0GDACmSnIxD2HPDqV1Yumchf2LeiqXctzYeiZ1KcmJ4LF1uJXzqz+NYQ5yp r/nSKbXLj+0oC9VCXcCZGrs7odnBi7Qg0w7PIN3sWJgMYS5TJ6ilWqCEdMDGmM7y TchzyZK9bxJ4vahVMBgFoSmPLQouXE8Wks38RPwa4XuU6DKCs6CCXGYY3Ffq57pL PGeF5wbmbbpKlmELYB6OVB6VTAaJCOz3W3Up4znGbZwldgNnEhsUPrvbHcWPFAw/ S7q7vJR/ol7nUUctYZYiF4y6zyYUKO5wpVxcNRnjIiG+m05dh/XsMcvq/ie0AE/W TR+429FqxLZsQUb19iHdwKw6HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwYvynP gvvvDCsfV2reGaW+MAGSMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXCKZsfG5P6PtXS+QCxmDViNVou3ZzweWLktEdvcCdBq69X5J5Xu/w HV2Jft7ipcn1pFx+0Qit7cfcap+KZhqXkIfmBB9TWgmMizy+rTIDPBfXTPbWUgjM 0KUA7ca5umvkWrTcfjSDc8M64jHR93QH9wpNKxIiE3x4Jwa0xJ4t34vKeYjKIP0z GNDt6owY+w0YbZWU9s2IgeJcGw8MVG1eDNqca6KsnLRC21zL6EdUHivyJFuXA7s7 0bg7NmLVvAyTNoIF4bQ1m9z77efpZJ/Me8BSC58kHk9FurXP8AB1UY/80tMy7gkG I1chqx4r3Jjsmq6yI0pT0eoFwF/YedQz -----END CERTIFICATE-----Generated at Sat May 31 17:11:31 2025 by rpki-client